Hello, everyone!
Welcome to Pluralsight and this course, Reconnaissance with SpiderFoot.
Before a Red Team even begins planning its attacks,
it needs detailed and relevant information about specific targets.
This is the reconnaissance phase,
and it's one of the first steps in Red Team engagement.
The Red Team can use that recon information from the very
first exploitation into lateral movement,
and even social engineering or physical attacks.
SpiderFoot is an open source intelligence automation platform containing over
200 modules and utilizing a variety of online data sources.
Starting with some initial target information and the level
of detail you want to get from that scan,
SpiderFoot will passively gather data from those online sources
based on the type of target information provided,
or it will actively probe the target.
It can start with a seed of target information,
such as a domain name, IP address, email,
or name, and then grow the search based on the data it finds.
SpiderFoot presents discovered information in a fairly effective web user
interface and can be managed through a simple command line.
We will start by learning more about the capabilities of SpiderFoot
to enable us to select an appropriate scan type and initial target
so that our searches can be effective.
We will also look at using SpiderFoot from a Red Team project perspective,
where we'll focus on a specific organization and the
information they expose to the internet.
As SpiderFoot uses both passive and active exploration techniques,
we'll explore options to collect information in a passive manner.
The target will have no indication of our activities.
Whether you're trying to gather open source
intelligence as part of a Red Team engagement,
or want to discover and reduce your organization's information exposures,
join me in learning more about performing reconnaissance
with SpiderFoot here at Pluralsight.